Wireshark
Wireshark
3.0.5

5.0

Wireshark free download for Mac

Wireshark

3.0.5
27 September 2019

Network protocol analyzer.

Overview

Wireshark is one of the world's foremost network protocol analyzers, and is the standard in many parts of the industry. It is the continuation of a project that started in 1998. Hundreds of developers around the world have contributed to it, and it it still under active development.

Wireshark has a rich feature set which includes the following:

  • Standard three-pane packet browser
  • Multi-platform: Runs on Windows, Linux, OS X, Solaris, FreeBSD, NetBSD, and many others
  • Multi-interface: Along with a standard GUI, Wireshark includes TShark, a text-mode analyzer which is useful for remote capture, analysis, and scripting
  • The most powerful display filters in the industry
  • VoIP analysis
  • Live capture and offline analysis are supported
  • Read/write many different capture file formats: tcpdump (libpcap), NAI's Sniffer (compressed and uncompressed), Sniffer Pro, NetXray, Sun snoop and atmsnoop, Shomiti/Finisar Surveyor, AIX's iptrace, Microsoft's Network Monitor, Novell's LANalyzer, RADCOM's WAN/LAN Analyzer, HP-UX nettl, i4btrace from the ISDN4BSD project, Cisco Secure IDS iplog, the pppd log (pppdump-format), the AG Group's/WildPacket's EtherPeek/TokenPeek/AiroPeek, Visual Networks' Visual UpTime and many others
  • Capture files compressed with gzip can be decompressed on the fly
  • Hundreds of protocols are supported, with more being added all the time
  • Coloring rules can be applied to the packet list, which eases analysis

What's new in Wireshark

Version 3.0.5:
Bug Fixes:
  • Qt interface crashes on a profile with packet list only.
  • Wireshark 3.0.4 does not start on macOS 10.13 after an upgrade from 3.0.3.
  • NET-SNMP EngineID Length handling Warning.
  • Upgrade from Wireshark 3.0.2/3.0.3 to 3.0.4/later is confusing and may not complete properly.
  • Crash SIGSEGV when decrypting IEEE 802.11 EAP re-authentications.

Full changelog available here.

23 Wireshark Reviews

See all

Rate this app:

David-Morrison
01 April 2013

Most helpful

Just for the record, when you start WireShark (1.9.2) in Mountain Lion, it offers to install an X11 system. If you say yes, it takes you to an Apple Support page which contains a link to the XQuartz project. You have to download and install it. Note that it gets installed in the Utilities folder inside the Applications folder. When you start WireShark, it asks you to find X11. Navigate to Utilities folder and select XQuartz. WireShark now freezes for a couple of minutes while it builds font caches - DON'T PANIC! Then the window appears.
Like (6)
Version 1.8.6
Macinman
28 July 2019
Hey guys, was curious if there is anyone here that uses Homebrew, I had upgraded to Wireshark 3.1.0 via the cask command in brew, then they released an update that put it back to version 3.0.3, which I had initially. I was just curious why? Thanks
Like (1)
Version 3.1.0
Jullrich
25 July 2018
greatest packet analysis tool ever
Like
Version 2.6.2
Virtualruffy
21 July 2017
Link is wrong, goes to old version. correct 2.4 version https://2.na.dl.wireshark.org/osx/Wireshark%202.4.0%20Intel%2064.dmg
Like
Version 2.4.0
iGaucho
21 November 2015
Finally it has a native UI and doesn't require X11/XQuartz!
Like (1)
Version 2.0.0
hwgray
29 October 2015
Wireshark.org suggests that users of OS X try v2.0.0rc1, first. If it doesn't work for you, then try this version.
Like
Version 1.12.8
WordWeaver
17 March 2015
This may possibly be of help to other new WireShark users who are having trouble getting WireShark to launch in Yosemite. Some of this has been shared before, but there is a little added twist at the end which worked for me. I made repeated attempts to use both WireShark 1.12.4 and 1.99.3, but without success. Regardless of which version I used, WireShark keep freezing up during the initialization process. In the initialization window, WireShark would get as far as "Loading module preferences", or about three quarters of the way done, and in the bottom of the window it would say "Please wait while Wireshark is initializing..."; and then freeze-up. So I conducted some quick research on the web and discovered that I had to enter "sudo ln -s /opt/X11 /usr/X11" in the Terminal in order to restore a link an X11 link that Yosemite breaks. However, even that did not help. Next, I reinstalled XQuartz 2.7.7. Again, that didn't help either. Then I came across an online comment where someone stated that they typed "sudo wireshark" in the Terminal. Guess what? I don't know why, but it worked. The Terminal spit out the following, and then WireShark launched on my desktop: void QCocoaMenu::insertNative(QCocoaMenuItem *, QCocoaMenuItem *) Menu item is already in a menu, remove it from the other menu first before inserting void QCocoaMenu::insertNative(QCocoaMenuItem *, QCocoaMenuItem *) Menu item is already in a menu, remove it from the other menu first before inserting void QCocoaMenu::insertNative(QCocoaMenuItem *, QCocoaMenuItem *) Menu item is already in a menu, remove it from the other menu first before inserting void QCocoaMenu::insertNative(QCocoaMenuItem *, QCocoaMenuItem *) Menu item is already in a menu, remove it from the other menu first before inserting 22:01:58 Dbg plugin_dir: /Applications/Wireshark.app/Contents/PlugIns/wireshark Now I can click WireShark's icon in the Dock, and it appears to be working fine.
Like (1)
Version 1.12.4
Chocky
14 February 2015
Wireshark on Yosemite To get Wireshark working on Yosemite you will need to install X11 which may be found at: http://xquartz.macosforge.org/landing/ and then make the following link: $ sudo ln -s /opt/X11 /usr/X11
Like
Version 1.12.3
Jpinoniemi
08 January 2015
Wireshark 1.12.3 was released on 1-7-15
Like
Version 1.12.1
Holgorio
17 September 2014
Wireshark 1.12.1 is available fixing several security issues with DoS vulnerabilities in some of their parsers or dissectors. Enjoy.
Like
Version 1.12.0
David-Morrison
01 April 2013
Just for the record, when you start WireShark (1.9.2) in Mountain Lion, it offers to install an X11 system. If you say yes, it takes you to an Apple Support page which contains a link to the XQuartz project. You have to download and install it. Note that it gets installed in the Utilities folder inside the Applications folder. When you start WireShark, it asks you to find X11. Navigate to Utilities folder and select XQuartz. WireShark now freezes for a couple of minutes while it builds font caches - DON'T PANIC! Then the window appears.
Like (6)
Version 1.8.6
Free

5.0

App requirements: 
  • Intel 64
  • macOS 10.12.0 or later
Category: 
Developer Website: 
Download(93.1 MB)MacUpdateInstall with MacUpdate

Downloaded & Installed 174,718 times